$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/5525312E5618E22B2B49F909064A0B8CBCA2022E.cer File: 5525312E5618E22B2B49F909064A0B8CBCA2022E.cer (raw, json) Hash identifier: EdP/nEZFzMZW987h3KG1lBHhyUmw9MMRykB2YteIJoc= Subject key identifier: 55:25:31:2E:56:18:E2:2B:2B:49:F9:09:06:4A:0B:8C:BC:A2:02:2E Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 6D3BD2744CF9DE90D3F399D9CB73746A485EB171 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 14 Feb 2025 12:58:04 +0000 Certificate not after: Fri 13 Feb 2026 13:03:04 +0000 Subordinate resources: IP: 2a06:1281:9000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 00:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3b:d2:74:4c:f9:de:90:d3:f3:99:d9:cb:73:74:6a:48:5e:b1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Feb 14 12:58:04 2025 GMT Not After : Feb 13 13:03:04 2026 GMT Subject: CN=5525312E5618E22B2B49F909064A0B8CBCA2022E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:b5:11:6c:ff:c9:ac:b9:5b:e4:26:df:55: 0d:37:bd:4e:13:8b:dd:b9:d8:87:05:1f:63:bf:fb: 17:69:cf:2c:6c:7c:0e:bc:53:19:71:70:76:a3:f5: 31:4f:1e:6b:8a:2a:e8:f9:50:3e:90:f5:6c:62:ab: 17:15:70:3d:e5:ff:ae:13:a5:4d:0e:2d:5f:7f:39: 7e:63:d2:36:9e:b4:ed:95:61:2b:7e:1b:28:52:eb: 6e:32:a2:b2:71:ba:82:e8:53:58:6b:d0:18:eb:a2: 07:7c:80:26:72:7c:17:6d:87:53:f3:ba:d8:13:84: 64:41:b3:e1:96:78:be:5b:ce:d9:d1:67:c9:9d:c6: b9:78:cc:51:2d:8d:97:fe:87:8b:62:58:a0:fb:b5: 82:55:18:4b:d9:f7:2a:a0:56:9f:37:21:86:57:a3: 42:ca:cb:ea:26:19:d2:f9:c1:84:bf:39:2c:27:ea: 49:2c:47:95:01:63:1b:f2:81:5d:c2:4b:9b:f1:47: ab:75:b1:e3:35:99:d6:1b:45:36:cd:af:37:a7:35: 04:50:c4:4a:de:67:91:8d:77:2f:5f:28:ea:9f:21: 6d:ef:07:fa:05:3b:fd:60:0b:a5:28:cd:2b:f6:3a: 06:ec:a1:dc:3d:3d:ac:e1:60:3c:03:b8:8e:a0:00: 1c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:25:31:2E:56:18:E2:2B:2B:49:F9:09:06:4A:0B:8C:BC:A2:02:2E X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:9000::/36 Signature Algorithm: sha256WithRSAEncryption 9b:09:5f:a9:ec:99:43:b8:69:fa:ff:ce:4d:7a:16:f5:4c:6d: 4c:98:7e:95:90:33:25:05:c6:46:88:dd:e4:88:21:37:e6:59: 59:bb:92:70:6f:fe:80:34:d0:56:9c:5c:d2:f4:e7:a3:f2:ee: 43:d4:0b:1b:62:f1:4b:36:32:7b:48:d8:f3:13:87:dc:36:d2: c2:c6:c1:f3:d7:b6:07:ba:1e:c4:35:52:ae:06:71:58:46:22: 6b:bb:fa:5c:85:6a:f8:3e:32:ee:15:42:9e:76:c5:b1:2e:1f: b5:08:51:bf:24:31:0d:ec:44:66:e3:f9:a1:18:e3:15:86:e4: 4e:e9:4d:07:fc:9a:51:a4:8b:44:4c:94:76:dd:d9:2e:db:d0: 5a:12:0e:d4:01:be:b3:1b:4d:86:39:c1:90:18:25:98:0b:77: 04:ef:84:d2:b9:37:b8:ff:4d:2b:13:77:c0:cf:c2:f8:6f:df: 56:3e:38:83:ce:7a:93:dd:54:ea:a8:1b:cd:cf:27:a3:cc:72: d4:01:4a:b3:3f:1d:4a:71:6b:7a:78:6b:d1:26:2e:f6:72:fd: 78:dd:37:7e:f1:dc:c0:ce:03:f1:9b:29:f3:ee:27:25:bc:bd: 24:3a:98:37:4a:88:4a:fe:d0:95:1e:0d:a9:be:42:73:2a:ab: e5:9a:a8:c0 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUbTvSdEz53pDT85nZy3N0akhesXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTAyMTQxMjU4MDRaFw0yNjAyMTMxMzAzMDRaMDMxMTAvBgNV BAMTKDU1MjUzMTJFNTYxOEUyMkIyQjQ5RjkwOTA2NEEwQjhDQkNBMjAyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs1rURbP/JrLlb5CbfVQ03vU4T i9252IcFH2O/+xdpzyxsfA68UxlxcHaj9TFPHmuKKuj5UD6Q9WxiqxcVcD3l/64T pU0OLV9/OX5j0jaetO2VYSt+GyhS624yorJxuoLoU1hr0Bjrogd8gCZyfBdth1Pz utgThGRBs+GWeL5bztnRZ8mdxrl4zFEtjZf+h4tiWKD7tYJVGEvZ9yqgVp83IYZX o0LKy+omGdL5wYS/OSwn6kksR5UBYxvygV3CS5vxR6t1seM1mdYbRTbNrzenNQRQ xEreZ5GNdy9fKOqfIW3vB/oFO/1gC6UozSv2Ogbsodw9PazhYDwDuI6gABw9AgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRVJTEuVhjiKytJ +QkGSguMvKICLjAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZTkyZWJjODMtZDc2Yy00YWUyLTg0ZWItZTZiZmYzZDM0MmIxLzIv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9lOTJlYmM4My1kNzZjLTRhZTItODRlYi1lNmJmZjNkMzQyYjEv Mi81NTI1MzEyRTU2MThFMjJCMkI0OUY5MDkwNjRBMEI4Q0JDQTIwMjJFLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqBhKBkDANBgkqhkiG9w0BAQsFAAOCAQEAmwlf qeyZQ7hp+v/OTXoW9UxtTJh+lZAzJQXGRojd5IghN+ZZWbuScG/+gDTQVpxc0vTn o/LuQ9QLG2LxSzYye0jY8xOH3DbSwsbB89e2B7oexDVSrgZxWEYia7v6XIVq+D4y 7hVCnnbFsS4ftQhRvyQxDexEZuP5oRjjFYbkTulNB/yaUaSLREyUdt3ZLtvQWhIO 1AG+sxtNhjnBkBglmAt3BO+E0rk3uP9NKxN3wM/C+G/fVj44g856k91U6qgbzc8n o8xy1AFKsz8dSnFrenhr0SYu9nL9eN03fvHcwM4D8Zsp8+4nJby9JDqYN0qISv7Q lR4Nqb5Ccyqr5ZqowA== -----END CERTIFICATE-----Generated at Sat Apr 5 09:52:33 2025 by rpki-client